First setup of elasticsearch

defaults/main.yml

@@ -0,0 +1,62 @@
+---
+cloud_apps: /opt
+cloud_storage: /opt/storage
+cloud_stage: prod
+cloud_update: false
+
+elastic_data_location: "{{ cloud_storage }}/elastic-data"
+elastic_logs_location: "{{ cloud_storage }}/elastic-logs"
+
+elastic_version: 8.17.1
+elastic_platform_suffix: linux-x86_64
+
+elastic_source: "https://artifacts.elastic.co/downloads/elasticsearch"
+
+elastic_cluster_nodes:
+  - elastic-host-0.local
+
+elastic_config_http:
+  port: 9200
+  host: 0.0.0.0
+
+elastic_config_xpack:
+  security:
+    enabled: true
+    enrollment:
+      enabled: true
+    http:
+      ssl:
+        enabled: true
+        verification_mode: certificate
+        keystore:
+          path: certs/http.p12
+    transport:
+      ssl:
+        enabled: true
+        verification_mode: certificate
+        keystore:
+          path: certs/transport.p12
+        truststore:
+          path: certs/transport.p12
+    authc:
+      token.enabled: true
+      realms.oidc.oidc1:
+        order: 2
+        rp.client_id: "the_client_id"
+        rp.client_secret: "the_client_secret"
+        rp.response_type: code
+        rp.redirect_uri: "https://kibana.example.org:5601/api/security/oidc/callback"
+        op.issuer: "https://op.example.org"
+        op.authorization_endpoint: "https://op.example.org/oauth2/v1/authorize"
+        op.token_endpoint: "https://op.example.org/oauth2/v1/token"
+        op.jwkset_path: oidc/jwkset.json
+        op.userinfo_endpoint: "https://op.example.org/oauth2/v1/userinfo"
+        op.endsession_endpoint: "https://op.example.org/oauth2/v1/logout"
+        rp.post_logout_redirect_uri: "https://kibana.example.org:5601/security/logged_out"
+        claims.principal: sub
+        claims.groups: "http://example.info/claims/groups"
+
+elastic_transport_host: 0.0.0.0
+
+elastic_cert_http_p12: "ThisIsTheHttpP12Certificate"
+elastic_Cert_transport_p12: "ThisIsTheTransportP12Certificate"